Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS41171.roa
File: AS41171.roa (raw, json)
Hash identifier: yaSH17gb4zkccFyP0lzeXLPOdnd/H1iWe5qJr7eWOf8=
Subject key identifier: 43:1A:23:6C:1F:49:DC:0D:FF:EA:00:59:A4:43:FB:A6:FA:A5:91:52
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1CD01B2635E34534FCB2F0864F26995CC8B277F6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS41171.roa
Signing time: Sat 06 Jun 2026 06:49:12 +0000
ROA not before: Sat 06 Jun 2026 06:44:12 +0000
ROA not after: Sat 05 Jun 2027 06:49:12 +0000
asID: 41171
IP address blocks: 78.105.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 12:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d0:1b:26:35:e3:45:34:fc:b2:f0:86:4f:26:99:5c:c8:b2:77:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 6 06:44:12 2026 GMT
Not After : Jun 5 06:49:12 2027 GMT
Subject: CN=431A236C1F49DC0DFFEA0059A443FBA6FAA59152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:67:89:46:75:91:11:a2:a4:b6:47:7c:53:
ce:02:ce:c5:e8:c7:c5:9d:83:a8:38:a8:e0:74:7b:
45:e6:68:36:58:f8:16:86:6e:90:08:42:b8:cb:d7:
b0:b4:c2:e0:fa:c3:07:3e:04:4c:ad:81:d9:b6:12:
0e:46:da:7e:84:a6:66:9c:98:bf:cf:e2:43:90:1b:
12:ff:35:c3:e8:4b:a5:68:28:03:90:e9:0b:38:28:
6e:40:2a:cd:62:1b:16:fc:3f:a5:47:33:23:07:09:
85:57:84:c6:eb:61:e7:25:25:70:04:bc:31:90:52:
1f:b8:90:16:a9:79:43:f1:2c:7e:99:9a:58:f9:c5:
d0:75:8f:ce:7e:c2:80:4a:e7:8d:a8:02:76:62:ee:
d0:47:6e:e1:06:cb:f1:34:18:24:77:7a:23:73:92:
c0:0f:90:4e:54:99:55:31:44:57:ab:41:9f:35:da:
2e:b3:89:b6:7c:bc:e8:cf:f9:53:e3:fd:ce:e6:ad:
49:e0:6d:b2:7d:22:09:20:4f:62:4c:c0:eb:d8:ce:
57:f0:62:f2:1d:0a:26:89:45:a6:aa:2e:e8:ec:be:
5e:f4:bc:38:66:88:22:6a:8b:12:da:b0:d4:2a:e0:
40:74:69:25:db:00:9b:95:db:1a:d4:c7:72:43:74:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:23:6C:1F:49:DC:0D:FF:EA:00:59:A4:43:FB:A6:FA:A5:91:52
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS41171.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.150.0/24
Signature Algorithm: sha256WithRSAEncryption
38:04:66:cc:ed:a3:35:0c:f3:e1:b2:2f:fb:6a:70:94:25:66:
21:68:eb:39:74:31:2f:b4:78:51:39:06:05:08:05:31:06:f0:
8e:e3:24:d4:96:63:91:72:02:b6:b0:6d:e1:01:61:f8:28:2b:
4c:9b:d6:34:30:01:43:f9:85:0b:07:03:87:93:c0:10:2b:b5:
08:a8:f8:00:e0:8f:81:b4:bc:54:c8:1d:9d:6d:e2:db:aa:d3:
20:a8:a7:f7:dc:2b:99:32:96:1c:4e:80:92:64:2f:20:46:66:
e5:d8:1d:ba:1e:47:3d:08:66:c0:db:1e:93:82:f8:84:96:2e:
c0:6c:88:41:d0:7b:6f:41:75:3c:f5:ae:8c:2c:fb:1b:6e:36:
26:7a:a4:8e:ae:5e:70:9d:6a:f5:a0:6f:de:13:81:6c:54:60:
9e:0e:23:a3:ae:c1:e5:bd:e5:dd:ce:69:5e:f3:ba:6d:cb:e6:
d7:98:ae:52:bf:d8:59:a5:c5:26:73:b1:d3:3e:4a:12:24:f5:
25:fc:59:17:d3:ae:a1:77:5c:94:26:eb:0a:2b:13:70:80:c8:
5b:ca:61:ed:47:46:1b:66:c8:b5:3b:48:87:de:d5:78:a7:41:
3e:06:6d:96:f2:6c:14:e0:d7:59:bc:f3:98:9e:79:1f:19:c6:
42:8b:a1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 19:12:42 2026 by rpki-client